This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20343033353034.roa File: 3139342e3234372e34352e302f32342d3234203d3e20343033353034.roa (raw, json) Hash identifier: GJ9H5qMFuesRjGGdPY42j9KwxVYLRdFz1c3FTVKPbZw= Subject key identifier: 65:D0:20:0F:2A:33:5F:4C:7F:A7:26:DC:30:5E:AC:2D:1D:BC:2D:31 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 207264D3938FD5353F503613F6C163A1BA9F5ED8 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20343033353034.roa Signing time: Tue 18 Nov 2025 19:01:08 +0000 ROA not before: Tue 18 Nov 2025 18:56:08 +0000 ROA not after: Tue 17 Nov 2026 19:01:08 +0000 asID: 403504 IP address blocks: 194.247.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:72:64:d3:93:8f:d5:35:3f:50:36:13:f6:c1:63:a1:ba:9f:5e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:08 2025 GMT Not After : Nov 17 19:01:08 2026 GMT Subject: CN=65D0200F2A335F4C7FA726DC305EAC2D1DBC2D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:06:83:c2:9d:0b:2a:0f:27:dd:40:f7:51: 52:69:11:99:32:a8:e7:0b:d1:64:8c:03:ff:6c:2b: 36:9e:f1:d4:a6:95:04:be:d6:53:bc:e5:8c:5a:ad: 67:cb:14:e0:ef:99:8a:4f:0e:4a:3f:82:d7:62:85: 5d:52:52:81:6d:84:85:a3:8e:18:b6:24:ac:20:f0: 61:3a:f1:fa:e3:d8:5f:91:88:12:5c:14:42:57:56: fb:27:86:83:2b:2d:0f:f2:a0:53:09:ef:b4:46:08: 71:0d:a1:6e:bd:97:e6:92:44:06:fb:8b:a9:21:49: c3:cd:a9:9c:74:52:c4:d9:28:c2:c1:5f:c7:29:a6: a3:cb:26:ad:1d:c1:5e:c3:d1:01:76:ed:4e:c5:6c: a1:e2:4a:39:b0:95:26:8a:4a:02:7f:3b:74:0d:a5: 59:ad:c6:ae:9d:26:f6:f5:29:d2:8b:f8:ac:1a:c8: ac:d2:38:5f:e4:c0:88:21:b8:56:83:b7:b1:d3:59: a2:a5:a2:f8:d9:a9:b5:3c:5c:dc:26:22:c3:71:06: 8f:12:fc:84:00:fb:41:6a:04:c3:db:34:de:65:8f: d0:12:3d:96:a7:58:a8:ed:ea:0f:4f:8a:2a:02:ca: 09:4c:c2:d6:7d:7f:e0:d2:5c:14:b4:b1:04:c0:e9: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D0:20:0F:2A:33:5F:4C:7F:A7:26:DC:30:5E:AC:2D:1D:BC:2D:31 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20343033353034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.45.0/24 Signature Algorithm: sha256WithRSAEncryption 61:7a:de:0e:b1:92:dd:d2:aa:0a:44:30:ba:56:19:b7:0f:4a: b7:91:06:16:ec:fc:44:81:5c:17:86:4d:5e:c1:99:81:15:9b: 38:60:f0:7c:96:51:ab:3c:81:bf:b2:4c:24:2a:21:3f:7f:81: 7a:59:8e:14:9c:27:61:42:d9:5b:6c:ba:b5:e9:5f:4f:d5:28: 60:a7:0e:58:83:87:62:c2:48:a6:44:86:4e:4e:ba:07:6b:02: 6b:c7:19:4c:30:c6:dc:7f:cf:0f:45:4b:47:18:45:73:9c:53: 0c:7d:b3:47:60:04:75:5e:8e:48:af:f5:a8:b8:fe:5d:e1:20: 97:c8:33:3b:d2:76:1b:de:2d:89:af:7c:2e:67:5e:79:43:ba: 90:d7:29:8c:a8:1b:90:21:c0:fd:7b:ca:b6:4d:07:46:28:f3: f0:cf:1b:3a:dc:28:da:89:c6:93:c4:76:4e:03:f4:82:41:0b: c7:de:0d:10:3f:0c:bf:a2:46:16:0b:ce:dd:45:73:04:83:bd: 85:b0:c3:bd:01:d2:a9:1a:3b:95:88:a5:7f:31:45:d5:e9:e9: 6b:42:48:56:fc:f5:34:5b:e9:21:5d:64:11:05:2f:eb:90:c4: 34:65:ef:4b:2f:ad:a1:ef:a8:34:17:13:7a:09:0b:fe:75:bc: a4:28:65:b3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIHJk05OP1TU/UDYT9sFjobqfXtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDhaFw0yNjExMTcxOTAxMDhaMDMxMTAvBgNV BAMTKDY1RDAyMDBGMkEzMzVGNEM3RkE3MjZEQzMwNUVBQzJEMURCQzJEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpQaDwp0LKg8n3UD3UVJpEZky qOcL0WSMA/9sKzae8dSmlQS+1lO85YxarWfLFODvmYpPDko/gtdihV1SUoFthIWj jhi2JKwg8GE68frj2F+RiBJcFEJXVvsnhoMrLQ/yoFMJ77RGCHENoW69l+aSRAb7 i6khScPNqZx0UsTZKMLBX8cppqPLJq0dwV7D0QF27U7FbKHiSjmwlSaKSgJ/O3QN pVmtxq6dJvb1KdKL+KwayKzSOF/kwIghuFaDt7HTWaKlovjZqbU8XNwmIsNxBo8S /IQA+0FqBMPbNN5lj9ASPZanWKjt6g9PiioCyglMwtZ9f+DSXBS0sQTA6UkpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUZdAgDyozX0x/pybcMF6sLR28LTEwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzMjM0MzcyZTM0 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzMzNTMwMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADC9y0wDQYJKoZIhvcNAQELBQADggEBAGF63g6xkt3SqgpEMLpWGbcPSreRBhbs /ESBXBeGTV7BmYEVmzhg8HyWUas8gb+yTCQqIT9/gXpZjhScJ2FC2VtsurXpX0/V KGCnDliDh2LCSKZEhk5OugdrAmvHGUwwxtx/zw9FS0cYRXOcUwx9s0dgBHVejkiv 9ai4/l3hIJfIMzvSdhveLYmvfC5nXnlDupDXKYyoG5AhwP17yrZNB0Yo8/DPGzrc KNqJxpPEdk4D9IJBC8feDRA/DL+iRhYLzt1FcwSDvYWww70B0qkaO5WIpX8xRdXp 6WtCSFb89TRb6SFdZBEFL+uQxDRl70svraHvqDQXE3oJC/51vKQoZbM= -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:03 2025 by rpki-client